Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33322d3332203d3e20323639323632.roa
File:                     323830343a363165303a3a2f33322d3332203d3e20323639323632.roa (raw, json)
Hash identifier:          Ndg7p8xD5OBAsVlUEQtybWiYEZvtPKxrP/En1QVMhio=
Subject key identifier:   2B:DB:C9:4F:70:8C:7C:27:79:B4:57:09:81:EB:F2:58:C9:B1:00:54
Certificate issuer:       /CN=EEA8B3997AFF147B3B052397FB3F022EC39DAAAA
Certificate serial:       63C31E39BEB187670EBEEF573CD5504E9DA301A2
Authority key identifier: EE:A8:B3:99:7A:FF:14:7B:3B:05:23:97:FB:3F:02:2E:C3:9D:AA:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33322d3332203d3e20323639323632.roa
Signing time:             Wed 12 Aug 2026 14:41:39 +0000
ROA not before:           Wed 12 Aug 2026 14:36:39 +0000
ROA not after:            Wed 11 Aug 2027 14:41:39 +0000
asID:                     269262
IP address blocks:        2804:61e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.crl
                          rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c3:1e:39:be:b1:87:67:0e:be:ef:57:3c:d5:50:4e:9d:a3:01:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA8B3997AFF147B3B052397FB3F022EC39DAAAA
        Validity
            Not Before: Aug 12 14:36:39 2026 GMT
            Not After : Aug 11 14:41:39 2027 GMT
        Subject: CN=2BDBC94F708C7C2779B4570981EBF258C9B10054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:49:f3:66:49:e1:da:ce:6a:ea:e7:47:a0:
                    bf:92:68:c3:76:24:19:48:35:7e:e0:96:18:60:d9:
                    f6:b0:d1:f0:bb:83:94:bb:a1:23:de:f7:1b:87:c5:
                    8d:ab:03:f2:dd:ec:78:f1:7b:eb:da:14:66:9f:55:
                    0b:05:c6:99:51:67:b2:06:dc:0f:4f:c5:a8:10:75:
                    51:82:3e:77:19:e1:64:a2:88:e8:45:77:68:5b:94:
                    bd:40:11:5b:71:7b:23:11:8a:3a:63:8b:42:30:a2:
                    b1:62:a0:a2:70:3c:e5:52:d6:56:fe:94:76:0f:eb:
                    32:95:a9:d6:7b:f7:27:46:39:1f:16:ea:f8:7d:21:
                    52:a4:c7:79:cd:4a:35:3b:9e:60:dd:54:f4:06:3a:
                    c1:e2:d0:b5:8f:2f:ae:fb:d3:ea:94:df:c0:7e:8e:
                    98:f2:4e:d4:56:1a:f2:c7:42:f6:4e:15:ef:e8:de:
                    cd:cd:09:fa:a6:b8:f4:6d:72:0d:44:65:31:9e:6c:
                    d7:43:6c:c0:0d:81:94:e9:f8:d0:e0:51:40:8d:d1:
                    93:d6:ae:56:d8:f0:bc:fa:ae:93:c4:75:50:cb:d8:
                    1c:c9:f3:0b:4e:46:7b:7c:8c:7c:b1:f7:6a:35:43:
                    c2:6e:a9:e4:b3:1c:17:a7:ba:9a:c3:e5:58:87:ff:
                    06:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DB:C9:4F:70:8C:7C:27:79:B4:57:09:81:EB:F2:58:C9:B1:00:54
            X509v3 Authority Key Identifier:
                keyid:EE:A8:B3:99:7A:FF:14:7B:3B:05:23:97:FB:3F:02:2E:C3:9D:AA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33322d3332203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:35:b6:a1:a7:f3:d1:9a:00:3e:38:e7:80:a2:8a:fc:80:6d:
         d4:70:17:35:2c:a8:f5:e1:f0:0b:38:f8:0a:3a:b3:6a:75:a9:
         50:2b:eb:87:2a:c3:9c:6a:8c:8c:9d:63:58:62:49:ee:80:3d:
         f6:e8:7b:d6:90:01:55:3d:75:83:d2:69:ed:39:fa:4d:42:f6:
         11:d6:87:0e:4c:e1:bf:02:f4:6d:86:57:a9:ff:c4:45:8d:2b:
         1e:1a:f4:fd:a5:17:d5:bd:c9:8b:49:03:b4:7d:83:84:5c:62:
         a1:a5:79:56:82:12:9b:0f:9c:fe:3d:84:66:39:47:99:fd:f9:
         4f:42:0f:c3:1a:c9:16:13:c8:58:54:a7:ff:7e:8e:b9:8d:a5:
         da:92:35:1c:59:97:35:84:e8:91:b5:e0:9d:a2:37:d8:48:c8:
         83:0e:80:39:86:5c:bf:6d:a5:c6:ff:1a:25:48:b7:ad:9f:c7:
         d6:69:ee:00:60:8c:15:e2:11:eb:c2:fd:42:c6:75:df:b0:1c:
         10:7b:f2:f9:72:c5:c5:0b:16:da:48:be:54:15:77:1d:94:84:
         34:f0:0d:ce:6c:cc:67:88:43:dd:a1:34:c7:8d:d7:ee:13:a4:
         c3:d5:08:18:00:08:82:64:4b:b3:0a:6e:44:6e:78:fe:4b:f7:
         56:dc:dd:19
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUY8MeOb6xh2cOvu9XPNVQTp2jAaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVBOEIzOTk3QUZGMTQ3QjNCMDUyMzk3RkIzRjAyMkVD
MzlEQUFBQTAeFw0yNjA4MTIxNDM2MzlaFw0yNzA4MTExNDQxMzlaMDMxMTAvBgNV
BAMTKDJCREJDOTRGNzA4QzdDMjc3OUI0NTcwOTgxRUJGMjU4QzlCMTAwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZEnzZknh2s5q6udHoL+SaMN2
JBlINX7glhhg2faw0fC7g5S7oSPe9xuHxY2rA/Ld7Hjxe+vaFGafVQsFxplRZ7IG
3A9PxagQdVGCPncZ4WSiiOhFd2hblL1AEVtxeyMRijpji0IworFioKJwPOVS1lb+
lHYP6zKVqdZ79ydGOR8W6vh9IVKkx3nNSjU7nmDdVPQGOsHi0LWPL6770+qU38B+
jpjyTtRWGvLHQvZOFe/o3s3NCfqmuPRtcg1EZTGebNdDbMANgZTp+NDgUUCN0ZPW
rlbY8Lz6rpPEdVDL2BzJ8wtORnt8jHyx92o1Q8JuqeSzHBenuprD5ViH/wbfAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUK9vJT3CMfCd5tFcJgevyWMmxAFQwHwYDVR0j
BBgwFoAU7qizmXr/FHs7BSOX+z8CLsOdqqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNkYkNUYWl5c1I3ejhMRjRWZTI5Sm5WS0IxU1lXamN1bjVXVDg0VW9j
bVkvMi9FRUE4QjM5OTdBRkYxNDdCM0IwNTIzOTdGQjNGMDIyRUMzOURBQUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFQThCMzk5N0FGRjE0N0Iz
QjA1MjM5N0ZCM0YwMjJFQzM5REFBQUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZGJDVGFpeXNSN3o4TEY0VmUyOUpuVktCMVNZV2pjdW41V1Q4NFVvY21ZLzIv
MzIzODMwMzQzYTM2MzE2NTMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARh4DANBgkqhkiG9w0BAQsFAAOCAQEAFzW2oafz
0ZoAPjjngKKK/IBt1HAXNSyo9eHwCzj4CjqzanWpUCvrhyrDnGqMjJ1jWGJJ7oA9
9uh71pABVT11g9Jp7Tn6TUL2EdaHDkzhvwL0bYZXqf/ERY0rHhr0/aUX1b3Ji0kD
tH2DhFxioaV5VoISmw+c/j2EZjlHmf35T0IPwxrJFhPIWFSn/36OuY2l2pI1HFmX
NYTokbXgnaI32EjIgw6AOYZcv22lxv8aJUi3rZ/H1mnuAGCMFeIR68L9QsZ137Ac
EHvy+XLFxQsW2ki+VBV3HZSENPANzmzMZ4hD3aE0x43X7hOkw9UIGAAIgmRLswpu
RG54/kv3VtzdGQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 10:40:49 2026 by rpki-client